Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS272470.roa
File: AS272470.roa (raw, json)
Hash identifier: jwAilXHV8QDznkQuDwpqJUyWXKDKHkz6HnhIcJ+POBQ=
Subject key identifier: B8:DD:7D:27:6F:6D:54:69:E4:C2:97:D2:51:A8:2C:21:FE:11:20:41
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 5A8E3C0C6BC41BD4EB55CA897D5ADA6B5480798E
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS272470.roa
Signing time: Mon 07 Apr 2025 00:00:09 +0000
ROA not before: Sun 06 Apr 2025 23:55:09 +0000
ROA not after: Mon 06 Apr 2026 00:00:09 +0000
asID: 272470
IP address blocks: 191.101.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:8e:3c:0c:6b:c4:1b:d4:eb:55:ca:89:7d:5a:da:6b:54:80:79:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 6 23:55:09 2025 GMT
Not After : Apr 6 00:00:09 2026 GMT
Subject: CN=B8DD7D276F6D5469E4C297D251A82C21FE112041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cc:f0:7b:14:8a:c3:6b:06:22:14:ad:da:7b:
be:45:c3:3f:97:74:ce:d3:bb:a9:39:93:05:1e:fa:
bd:b9:29:4b:68:ac:23:98:1c:c5:82:2e:5d:88:c9:
4b:18:a7:5d:72:e4:f6:19:76:06:72:30:2f:1f:51:
62:c3:23:3f:ea:fa:ff:5c:0a:e2:38:72:fc:72:d6:
4f:e9:9e:9b:4c:e2:c2:f4:9f:b7:82:20:93:cf:9a:
38:67:49:71:de:22:4a:2d:69:83:16:74:ac:8d:fa:
1c:85:62:98:ce:55:e8:f1:4b:14:e1:ca:1b:40:0b:
9d:2c:a7:b1:3f:64:40:cb:a8:05:0b:8b:94:12:2d:
59:48:47:6b:87:4a:05:11:4d:ec:f4:a3:cd:c6:01:
0b:4b:fd:b4:de:85:31:c9:95:be:95:54:bc:8e:21:
11:d8:a2:15:7f:1d:24:54:70:d2:be:47:ed:41:aa:
ec:a4:c3:c8:71:cb:b6:a6:23:ad:ee:ce:b0:45:36:
26:13:98:a6:5a:16:29:70:5d:d5:a1:92:18:a5:f0:
84:d8:b6:de:1a:b6:d4:a7:dd:03:60:92:1b:b6:73:
6a:f6:82:e2:66:de:e2:5e:16:e3:8b:1b:d1:ef:ed:
42:76:ce:73:3e:dd:23:64:c6:a8:bc:d4:d3:85:94:
4e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DD:7D:27:6F:6D:54:69:E4:C2:97:D2:51:A8:2C:21:FE:11:20:41
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS272470.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.135.0/24
Signature Algorithm: sha256WithRSAEncryption
56:e5:7f:3e:5c:d5:cc:59:2d:ec:24:a0:01:99:d0:92:fa:fb:
c3:37:b7:3a:fe:f7:2a:06:6f:58:bb:29:69:2b:20:a5:ca:59:
a2:c4:37:d0:69:31:07:e5:09:23:d6:3c:6a:b4:f2:11:38:c4:
96:64:fb:33:30:bb:ba:c4:8c:2d:e9:58:db:03:ca:93:1d:89:
81:c4:2f:e1:e4:8a:b5:b4:33:76:75:e7:ec:c0:30:45:36:23:
95:b5:a9:79:ee:5f:22:34:f8:63:97:3c:50:06:a5:a6:e8:ff:
8b:af:29:52:a2:89:5c:c1:c9:68:ac:d9:10:a4:11:06:fa:d4:
1c:c3:58:a7:d5:51:6c:35:15:b5:32:3d:2e:a4:27:b8:da:48:
bb:56:e7:26:1f:3f:a6:67:f1:83:a8:24:4c:fa:a4:bb:92:18:
25:0d:cf:db:1f:81:97:6a:7a:ae:bb:77:59:96:38:bd:d0:4d:
2a:54:05:77:33:27:3f:af:bf:aa:c1:f8:60:44:b5:46:51:ef:
6d:e2:32:17:ce:52:2f:c9:0d:b7:1d:72:fd:c7:13:21:9c:89:
8d:4f:69:f1:15:c2:fb:fa:cd:47:c2:7b:6e:92:06:5a:8b:f5:
34:5d:e4:e9:cb:18:c4:08:dc:38:9f:35:b8:7b:c5:16:56:6e:
87:fb:11:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:26 2025 by rpki-client on console.sobornost.net